Mac Malware Injects Ads into Encrypted Traffic

[silversurfer]

A newly discovered piece of malware targeting macOS devices is capable of injecting ads into encrypted web traffic, Malwarebytes security researchers warn.

Detected as OSX.SearchAwesome, the malware is delivered through a malicious installer that arrives as a cracked app downloaded via a torrent file. The threat’s installer is a disk image file that lacks the usual decorations used to make it look legitimate.
When launched, the image file installs the components invisibly and then requests the user to authorize changes to Certificate Trust Settings and to allow a component called spi to modify the network configuration.

Full report by Malwarebytes: https://blog.malwarebytes.com/threat-ana...injection/

Source: https://www.securityweek.com/mac-malware...ed-traffic